IBM Support

JR46344: RESTRICTING INSTALLATION ACCESS TO PROCESS SERVERS FAILS WHEN THE MAIN ADMIN USER IS NOT A MEMBER OF THE RESTRICTED GROUP

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Restricting snapshot installation access to a process server by
    following these instructions can cause deployment to fail:
    http://pic.dhe.ibm.com/infocenter/dmndhelp/v8r0m1/index.jsp?topi
    c=%2Fcom.ibm.wbpm.admin.doc%2Ftopics%2Fmanaging_users_g.html
    
    Below error is shown in the logs:
    [4/30/13 17:15:57:554 CDT] 000002c9 GovernanceSer E
    com.lombardisoftware.server.ejb.
    governance.GovernanceEventServiceCore
    deploySnapshotFromGovernance CWLLG3512E: Governance service
    'Install Snapshot' failed due the following error:
    'You are not authorized to deploy this snapshot'
    
    This issue can be seen when moving to BPM 8.0.1 from previous
    versions.
    

Local fix

  • Add the system admin user to the authorized users group.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  IBM Business Process Manager user v8.0.1    *
    ****************************************************************
    * PROBLEM DESCRIPTION: Restricting snapshot installation       *
    *                      fails to deploy on process server when  *
    *                      system admin user is not part of        *
    *                      restricted group.                       *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    Failure to deploy snaphot happens because the default
    governance process calls the install snapshot service under
    the system admin user instead of the user that initiated the
    installation request from the ProcessCenter UI.
    

Problem conclusion

  • Since the user that triggers the snapshot installation is
    already being checked for authorization before reaching the
    governance code, the governace code needs to skip checking the
    authorization of the user assigned from the sytem lane in
    the default governance process.
    
    Install/Dependency information is available in the readme.txt
    on FixCentral. When the user goes to the download files page
    in FixCentral, the readme will be available with the fix
    package as a separate download.
    

Temporary fix

Comments

APAR Information

  • APAR number

    JR46344

  • Reported component name

    BPM STANDARD

  • Reported component ID

    5725C9500

  • Reported release

    801

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-04-12

  • Closed date

    2013-07-19

  • Last modified date

    2013-07-19

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    BPM STANDARD

  • Fixed component ID

    5725C9500

Applicable component levels

  • R800 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSFTDH","label":"IBM Business Process Manager Standard"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0.1","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
07 January 2022